Skip to content

[Investigation] Agent-led workflow gaps: closure, decision visibility, review provenance and focus #273

Open

Description

@Dong1017

Inspected main 436c950c on 2026-10-30 through the GitHub API: 88 Issues, 182 PRs and 942 conversation comments. Record and source inspection only; no code, model or device was run.

Revised 2026-10-31 after the proposal review and the owner's decisions: F1 covers all eight closures and their common cause, F4 updates #248, F5 adds byte sizes measured at main 68108700, and the remedies carry their decisions. Other measurements are unchanged.

Current state: decisions are recorded for R1–R5; R1 software is delivered in PR #296 after current-head review and passing CI. R6 remains open for discussion. Decision needed (Dong1017): R6 byte budgets and the transition for raw evidence in #113 / #51. Next action: record the remaining R6 disposition; R1 does not complete the other remedies.

Goal and acceptance

  • Problem / desired outcome: InferRSI is developed agent-first. Agents implement, review and report; humans take part through Issues to scope work, authorize resources and accept results. In this mode, human attention is the scarcest resource and the Issue is the human's control surface. This investigation found five places where agent throughput outruns that control surface. Each has a small remedy (R1–R6 below).

    Gap Key evidence Remedy
    F1 Closure bypasses the acceptance owner 8 closures of 7 human-owned Issues on PR merge, all caused by negated sentences such as "this PR does not close Acceptance: MiniCPM-o 4.5 single-L20X vLLM-Omni throughput optimization #49" R1, R2
    F2 Pending human decisions are hard to find 5.2% of Issue comments come from an account other than the Issue author; the documented decision labels do not exist R3
    F3 Review provenance is self-reported 30% of merged PRs have a review from another account R4
    F4 Throughput flows to locally closable work No acceptance Issue records a full-gate PASS R5
    F5 Raw evidence enters Git without a size guard evidence/ grew from 0.69 MB to 24.2 MB in four days; Record Qwen3-Omni two-GPU campaign and source-grounded tuning knowledge #113 would add 49.1 MB R6
  • Completion criteria: the acceptance owner records accept, defer or reject for each of R1–R6. Each accepted remedy is delivered by its own scoped task or PR, linked here.

Scope and constraints

Ownership and authorization

Inputs and deliverables

  • Relevant sources, revisions or linked issues: main 436c950c; GitHub API snapshots of 2026-10-30 and 2026-10-31; the Issues and PRs linked below.
  • Expected artifacts: one decision per remedy, recorded here, with links to any follow-up tasks.

Findings

F1. Closure bypasses the acceptance owner

Working rule 6 says: "Use non-closing Refs #N until closure is authorized." To follow it, agents wrote negated sentences in PR bodies. GitHub matches closing keywords regardless of negation, so each of these merges closed a human-owned Issue:

Issue Closing PR merged (UTC) Text in the PR body Issue closed Current state
#43 #45, 10-20 12:13:57 "this PR does not close #43" 12:13:59 reopened 14 h later; closed manually on 10-26
#40 #69, 10-21 16:40:22 "this PR does not close #40 automatically" 16:40:24 reopened 2 min later; closed manually on 10-22
#29 #85, 10-22 03:42:26 "This PR does not automatically close #29" 03:42:28 closed; its deliverables are on main
#49 #92, 10-26 02:50:00 "this PR does not close #49" 02:50:02 closed; author asked whether it should stay closed
#50 #154, 10-26 06:19:15 "This PR does not close #50/#140 automatically" 06:19:17 closed; accepted by the owner on 10-31
#255 #259, 10-30 01:50:06 "Do not promote the candidate or close #255" 01:50:07 reopened 11 min later
#253 #269, 10-30 08:34:20 "neither this software PR nor green CI closes #253" 08:34:22 reopened 29 min later
#255 #270, 10-30 14:11:04 "this does not establish accuracy improvement or close #255" 14:11:07 reopened 39 min later

No PR body has used a standalone Closes #N. The two intended closures, #183 and #185, used the Development sidebar link. Rule 6 relies on writers knowing GitHub's matching rules, and no check enforces it.

Separately, #10 was closed as completed while its body records "Initial verdict: INCONCLUSIVE" and it has no closure comment.

F2. Pending human decisions are hard to find

F3. Review provenance is self-reported

  • Of 166 merged PRs, 50 (30%) carry a review from an account other than the PR author. 75 have reviews only from the author's own account, which in this workflow are agent sessions; 41 have no review.
  • The repository already states the limit. The Agent-assisted-by trailer is "self-reported provenance, not cryptographic signing, independent review or approval" (line 180), and a #61 comment notes that a shared account cannot prove which agent instance acted.
  • Fast merges suit agent work. The gap is that a later reader cannot check which reviewer saw which head with which inputs.

F4. Agent throughput flows to locally closable work

F5. Raw evidence enters Git without a size guard

Proposed remedies and decisions

The owner's decision record gives the reasons and follow-ups.

Remedy Addresses Decision (2026-10-31)
R1 Add a pr-references job to ci-ready.yml that fails when closing syntax (close, fix, resolve and their variants followed by an Issue reference) appears inside a sentence of the PR body, negated or not. A standalone Closes #N line stays allowed for an authorized closure. The job keeps the ready lane's existing events: in all eight closures in F1, the sentence was already in the body at the last such event before merge. A body edit is checked at the next push. It is not a required check: a red result warns before merge without blocking it. Rule 6 gains one sentence on this. F1 Accepted
R2 When a kind:acceptance Issue is closed as completed without a closure summary that records the authorized disposition, evidence and remaining scope, a workflow posts one comment. A valid neutral or negative result can complete delivery. It reports; it does not reopen. F1 Deferred
R3 Keep a three-line status block at the top of each open Issue body (current state; decision needed, and from whom; next action), maintained by the acting agent, and provide a list of pending decisions. F2 Moved to #284
R4 Pilot a revision-bound review record in a fixed format: reviewer role and source, exact head and evaluated base, validation scope, evidence, and disposition of open findings. Record an unknown runtime identity as unknown, and summarize inputs instead of publishing private prompts. Decide on a merge gate after the pilot. The record makes review auditable; it does not prove independence. F3 Deferred
R5 For each of the five open campaign PRs, list the minimal fix for its existing review findings and its current owner, then merge, split or close it. Name an owner for #248, whose first pilot already includes a workbench-only arm (A2). F4 Accepted; in progress
R6 Store large raw artifacts outside Git as GitHub Release assets, with an accessible URL, a retention owner and SHA-256 recorded in the repository; a hash alone does not keep an artifact retrievable. Set per-change and per-file byte budgets with exceptions, checked before merge. F5 Under discussion

Completion and closure

Activity

  1. added
    kind:investigationResearch / discovery; no delivery promise
    area:processRepo-wide process, governance, privacy and security rules
    on Oct 30, 2026
  2. Dong1017 commented on Oct 30, 2026

    @Dong1017
    CollaboratorAuthor

    建议优先处理 R1 的误关闭防护、R3 的决策入口和 R5 的逐项阻塞处置,其余措施先修准语义,避免增加一层只能由人反复解锁的流程。以下是技术建议,供 acceptance owner 逐项决定,尚不代表接受或启动实现。

    • R1 / R2:以授权处置为核心。 R1 必须监听 PR 正文编辑并在合入前刷新;现有 draft lane 只有 push 触发,单独加在那里会漏掉“绿灯后改正文”。同时检查否定句中的 closing syntax,明确正文以外的 commit/manual-link 覆盖边界及授权例外。R2 应提醒“缺少授权结论、证据与剩余范围”,而非统一要求 PASS:有效中性/负结果也可能完成证据交付。每次事件最多一条提醒。
    • R3:复用一个短状态区。 首屏保留当前状态、确实待决的具体问题及决策人、下一步;证据折叠。现有 [Tracking] SkillEval evolution: local evidence, PR review and optional LLM judge #253 已有维护区,宜压缩而非再添一套评论。标签设置单独决策。统计中的“非作者账号占比”宜保持该称谓,共享账号不能据此识别人类参与率。
    • R4:先试行可核验记录,再决定硬门禁。 复用实际 review 的角色/来源、head、评估 base、验证范围、证据和未决 finding 处置。仅有 model/head/verdict 字段不能证明独立评审;允许如实记录未知运行身份,输入用范围摘要即可,避免公开私人 prompt/session。
    • R5:按阻塞处置旧 PR,并明确 task: measure whether InferRSI helps Claude Code and Codex optimize inference tasks #248 的有限首轮目标。 等待时长/行数是排查入口;例如 docs(casebook): three cases from a Qwen3.8 dedicated-engine campaign #90 仍涉及索引一致性与不可变证据,Record Qwen3-Omni two-GPU campaign and source-grounded tuning knowledge #113 涉及聚合 WER 验证及集成问题。先列每项最小修复与现有负责人,再决定合入、拆分或终止。task: measure whether InferRSI helps Claude Code and Codex optimize inference tasks #248 的 workbench-only 臂有归因价值,但应先处理 INCONCLUSIVE 与 false-claim 的区分、可执行的等预算约束,再决定首轮是否纳入。
    • R6:支持新增证据体积预算的方向。 建议同时定义单文件与整次增量字节上限、压缩包边界及例外;外置证据需要可访问地址、保留责任和 SHA-256,单有哈希无法保证将来可取回。阈值和存储方案仍由 owner 决定。
    核验来源与新实例

    当前核对 main 3902e4ab:draft 触发配置、关闭处置规则、评审记录规则、GitHub 关闭关联说明。另核对 #10 当前状态与评论、#61 共享账号说明、#90/#113 的现有阻塞及 #248 讨论;未独立重算本 Issue 的全仓统计。

    新实例:#270 于 14:11 UTC 合入后,#255 在 14:11:06 UTC 变为 completed,尽管整体准确度目标仍未验收。PR 正文的否定式关闭措辞已纠正并读回;#255 已于 14:49 UTC 恢复 open。这再次说明自然语言否定不能作为 closing syntax 的豁免。

    现有工作处置入口(建议顺序,不新增指派): #90 先修索引与已有证据定位;#132 可并行处理 inventory、论证和路径;#55 修空 NPZ 分类与整合;#113 版本化修聚合校验并保留冻结材料。以上最小修正均无需先启动新硬件实验或等待 R6 阈值。#51 的软件修复可继续,其 campaign 下一步需要既有验收方澄清 #49 的关闭处置。具体 owner、现有 review 与边界见下方关系表。

    与现存 PR 的关系:复用实现,按既有阻塞推进

    #273 是治理与决策索引,尚不是现有 PR 的新增合入依赖。 新措施接受后再明确适用范围;原有正确性、来源、隐私和集成阻塞继续有效。

    • R1/R2 复用已合入的责任边界 #23 与关闭摘要 #87,补执行检查。
    • R3 可复用 #173 的单评论/折叠呈现、#216 的版本绑定 advisory、#271 的逐项反馈;这些报告能力不等于 Issue 状态维护已完成。
    • R4 的自动化沿用 #208、#213 的针对性刷新/去重。R6 可参考 #195 的当前树证据包整理,同时保留冻结历史;目前尚无独立 R1–R4 实现 PR。
    当前 PR / 检查 head 已有阻塞与最小下一步 #273 衔接
    #51 / 3c1b2ff 评分 resume 绑定与集成问题,修 provenance/regression 后处理冲突与声明;既有作者 amy-why-3459 R5:先澄清 #49 的关闭处置。负结果归档交付与 campaign PASS 分开
    #55 / c69961b 空 NPZ 错误分类、冲突及当前验收链接;既有作者 jiangkuaixue123 R5:保留 #53/#57 历史和 #67 当前目标的分界,避免追加新 campaign 要求
    #90 / 86f0033 索引失配与固定证据定位,重生成 projection、补已有证据并复验;既有作者 jiangkuaixue123 R5:小步修复候选;未查到明确本仓治理 Issue,不能自动绑定其他 campaign
    #113 / e1ae256 WER aggregate-trust、冲突及声明;采用版本化 successor,保留 frozen bytes;既有作者 amy-why-3459 R5/R6:讨论证据归档/拆分,但不追溯套用尚未接受的体积阈值
    #132 / 951b218 inventory、无效带宽下界论证和个人路径,逐项修正后复验;既有作者 amy-why-3459 R5/R6:保留外部报告的证据边界;不另要求一次新硬件试验
    #263 / 1a52db06 source snapshot 不可达及整合验证 现有 provenance 修复,继续原作者路径,无需等待 R4 新门禁
    #268 / 56a40049 隔离、claim 持久化、绝对 deadline #249 实现应修这三项;它不是 #273 的流程实现

    #270/#271/#272 已交付各自的软件切片,保留冻结效果证据的原始基线,不因治理提案重测。#252 是仍待范围/实施人决定的 Issue,另有已有设计 review,不是上述 PR 的共同前置。

    R5 的关键决策是现有责任人如何处置每项 blocker,以及 #248 的有限 M0/M1 负责人和首轮实验臂。workbench-only 已在原五臂方案中;结果分类/预算强制问题应先明确。以上只记录现有作者与建议,不新增指派或推断 worker 正在运行。

  3. Dong1017 commented on Nov 1, 2026

    @Dong1017
    CollaboratorAuthor

    Owner decisions on R1–R6 (2026-10-31, Dong1017)

    Decision Reason Follow-up
    R1 Accept. Closing syntax inside a PR-body sentence fails a pr-references job in ci-ready.yml, negated or not; a standalone Closes #N line stays allowed. The job keeps the ready lane's existing events, so a body edit is checked at the next push. It is not a required check. All eight closures in F1 came from negated sentences, and in all eight the sentence was already in the body at the last ready-lane event before merge. Adding edited would rerun the ready workflow on every body edit. One PR with Refs #273; no separate task Issue
    R2 Defer. Among acceptance Issues, only #10 was closed against its recorded verdict. Revisit if this recurs. —
    R3 Move. #284 covers the status block, the label scheme and the pending-decision view together. #284
    R4 Defer. — —
    R5 Accept; already in progress. No extra mechanism for F4. The review comment lists the minimal fix for each campaign PR, and #248 runs a bounded pilot. The campaign PRs and #248
    R6 Keep open for discussion. Direction: GitHub Release assets with an accessible URL and SHA-256. Open: byte budgets, and how #113 and #51 land their raw evidence. #113 and #51 are drafts with merge conflicts, so neither can merge soon. Size notes on #113 and #51

    Issues closed by the negated sentences in F1:

    This Issue stays open until R6 is decided and the R1 PR is linked here.

  4. Dong1017 commented on Nov 1, 2026

    @Dong1017
    CollaboratorAuthor

    开始推进已接受的 R1 实现,按owner 决策提交一个关联本 Issue 的 PR,避免重复认领。

    范围仅为 Ready lane 的 pr-references 检查、对应测试及 rule 6 说明;保留现有事件,不添加 edited,不改 required checks 或仓库设置。句内 closing syntax 被拒,明确的独立关闭行保留。R2/R4 的延期、R3 的独立讨论及 R6 的待决状态不变。当前为实现中,尚无交付或验收结论。

    **协调更新(2026-11-01):**已有 PR #296交付同一 R1 范围,后续沿用该 PR,本线程不再另建重复 PR。上述认领不代表该 PR 已通过评审或验收。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:processRepo-wide process, governance, privacy and security ruleskind:investigationResearch / discovery; no delivery promise

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions